Node.js
Node.js is the runtime that powers Aliz's backend services and tooling. This page collects learning resources from first steps to production best practices. For JavaScript language fundamentals, see JavaScript & TypeScript.
Where to start
New to Node? The official Learn section is a great starting point. Pair it with the Node.js Roadmap for a structured learning path.
Official Resources
- Node.js Learn — The official learning path — covers getting started, debugging, and core APIs.
- Node.js API Reference — The complete built-in module reference. Bookmark it.
- Node.js Roadmap — Visual roadmap covering everything from basic modules to streams, worker threads, and deployment.
Core Concepts
- The Node.js Event Loop — Understanding the event loop is essential for writing performant Node.js code.
- Node.js Best Practices — 102 best practices covering architecture, error handling, code style, testing, security, performance, and Docker. The most comprehensive Node.js guide on GitHub (100k+ stars).
Package Management
- npm Documentation — Official npm docs: dependency management, lockfiles, workspaces, scripts, and publishing.
Aliz projects use npm as the default package manager. pnpm is the only endorsed alternative when there is a concrete reason such as large monorepo performance or strict dependency isolation.
Testing
- JavaScript Testing Best Practices — 50+ testing best practices covering unit, integration, and E2E strategies. By the same author as Node.js Best Practices.
For Aliz's recommended testing tools, see Tech Stack — Vitest and Tech Stack — Playwright.
Security
- Node.js Best Practices — Security — 25 security best practices including input validation, headers, dependency scanning, and rate limiting.
- Snyk Vulnerability Database — Search for known vulnerabilities in npm packages.
Production & Docker
- Node.js Best Practices — Docker — 15 Docker best practices: multi-stage builds, graceful shutdown, caching, and secrets management.
Related Docs
- Web Security Essentials — XSS, CSRF, CSP, and security headers
- npm Supply Chain Attacks — dependency confusion, typosquatting, and mitigation strategies
- npm — Aliz's default package manager: setup, lockfiles, and workspaces